このレポートには指定された言語の翻訳がありません。代わりに正規の英語レポートを表示しています。
バージョン付きセキュリティ評価
レポートID: SA-C43861A6
7/23/2026, 12:21:57 PM
claude-api セキュリティ評価 v8
スキルセキュリティ認証レポート
スキャナーバージョン 3.0.0 監査モデル: codex 最新の公開済みレポート
- スキル名
- claude-api
- バージョン
- v8
- メンテナー
- anthropics
- カバレッジ
- 66 スキャンされたファイル · 15,086 解析済み行数
- ポリシーバージョン
- skillstore-security-audit-policy-v1
確認済みの検出結果における最高重大度
高
2 件の確認済みセキュリティ検出結果に対応が必要です。
インストールのコンテキスト
現在のスキルページを確認
このページはレポートの証拠のみを要約しています。正規のインストール勧告は Skill ページで提供されます。
現在のスキルページを開くこのレポートは、マニフェストまたは ZIP をブロックも承認もしません。
The skill is documentation-focused, but it intentionally demonstrates network, environment, filesystem, and external-command operations. Most severe detector matches are syntax or prose false positives; privileged archive extraction and shell evaluation of credential output remain high-risk guidance. Static review was capped at 400/668 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
レポートの位置
最新の公開済みレポート
「最新」はレポートの順序を指し、アーティファクトの最新性を指すものではありません。
監査アテステーション
有効な証明
この完全に一致するレポートには公開証明があります。
人による検証
未検証
このレポートには人による検証は記録されていません。
カバレッジ
66 スキャンされたファイル · 15,086 解析済み行数
レビュー対象の項目を 194 件表示
制限事項
このレポートはランタイムまたはサンドボックスでの実行を主張するものではなく、副作用がないことを証明するものでもありません。
証拠チェーン
ソースバインディングからインストール契約まで証拠をたどってください。利用可能な証拠は検証を支援しますが、安全性を保証するものではありません。
ソース
コミットとパスにバインド済み
アーティファクト
コンテンツとツリーのハッシュがバインド済み
監査
完了
確認された機能
「確認」とは、このレポートで裏付けとなる証拠が記録されていることを意味します。「記録なし」は、機能が存在しないことを証明するものではありません。
スクリプトを含む
Skillに含まれるコードを実行する場合があります。
12 件の証拠箇所で確認
ネットワークアクセス
外部サービスに接続する場合があります。
92 件の証拠箇所で確認
ファイルシステムへのアクセス
ローカルファイルの読み取りまたは書き込みを行う可能性があります。
41 件の証拠箇所で確認
環境変数
プロセス環境から値を読み取る可能性があります。
63 件の証拠箇所で確認
外部コマンド
Skillの外部にあるコマンドまたはプログラムを呼び出す場合があります。
50 件の証拠箇所で確認
機能レビュー項目 (192)
高
AWS credential environment variables
The client resolves AWS credentials via the standard precedence chain: explicit constructor args → e
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
ApiKey = Environment.GetEnvironmentVariable("ANTHROPIC_API_KEY")
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
export ANTHROPIC_API_KEY="your-api-key"
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
export ANTHROPIC_API_KEY="your-api-key"
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY"
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (reads ANTHROPIC_API_KEY from environment)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
$client = new Client(apiKey: getenv("ANTHROPIC_API_KEY"));
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
apiKey: getenv('ANTHROPIC_FOUNDRY_API_KEY'),
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
'x-api-key: ' . getenv('ANTHROPIC_API_KEY'),
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
# ANTHROPIC_API_KEY, or ANTHROPIC_AUTH_TOKEN, or an `ant auth login` profile.
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
client = anthropic.Anthropic(api_key="your-api-key")
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
# ANTHROPIC_API_KEY, or ANTHROPIC_AUTH_TOKEN, or an `ant auth login` profile.
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
client = anthropic.Anthropic(api_key="your-api-key")
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
# Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
client = Anthropic::Client.new(api_key: "your-api-key")
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
# Default (uses ANTHROPIC_API_KEY env var)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
client = Anthropic::Client.new(api_key: "your-api-key")
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**Auth** — the CLI resolves credentials the same way the SDKs do (first match wins): explicit flags,
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
- **API key**: set `ANTHROPIC_API_KEY` in the environment.
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
- **OAuth profile** (no static key to manage): `ant auth login` opens a browser, exchanges for a sho
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
> **The #1 auth trap:** profiles are only consulted when no API key is set. A stale exported `ANTHRO
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
OAuth tokens go on `Authorization: Bearer` (not `x-api-key:`) **plus the `anthropic-beta: oauth-2025
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**Foot-gun:** `ant auth print-credentials` with **no flags** prints the entire credentials JSON, not
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
- Both `ANTHROPIC_API_KEY` and `ANTHROPIC_AUTH_TOKEN` set — the SDK sends both headers and the API r
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**Fix:** Set `ANTHROPIC_API_KEY`, or run `ant auth login` and leave the client constructor empty. Fo
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
-H "x-api-key: $ANTHROPIC_API_KEY" \
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**An unset `ANTHROPIC_API_KEY` does NOT mean there are no credentials.** The SDKs and the `ant` CLI
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**When you need to call the API and `ANTHROPIC_API_KEY` is unset, don't ask the user for a key.** Fi
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
Only ask the user for a key if `ant auth status` reports no active credential source (or `ant` itsel
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
**GA, no beta header.** Construct the normal zero-arg client (`Anthropic()` / `new Anthropic()` / `a
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
- **No `ANTHROPIC_API_KEY` ≠ no credentials.** Don't bail or ask the user for a key just because the
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
- **WIF auth: unset `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, and `ANTHROPIC_PROFILE`.** `ANTHROP
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// ANTHROPIC_API_KEY, or ANTHROPIC_AUTH_TOKEN, or an `ant auth login` profile.
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Generic API/secret keys
// ANTHROPIC_API_KEY, or ANTHROPIC_AUTH_TOKEN, or an `ant auth login` profile.
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Git platform tokens
"authorization_token": os.environ["GITHUB_TOKEN"],
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Git platform tokens
authorization_token: process.env.GITHUB_TOKEN, // repo clone token (≠ MCP auth)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Git platform tokens
"authorization_token": os.environ["GITHUB_TOKEN"], # repo clone token (≠ MCP auth)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Git platform tokens
authorization_token: process.env.GITHUB_TOKEN,
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
高
Hidden file in home directory
If a type or member you need isn't in the tables above, `strings ~/.nuget/packages/anthropic/*/lib/*
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
高
Python subprocess.check_output
before = subprocess.check_output(["git", "show", "HEAD:CLAUDE.md"], text=True)
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
高
sudo privilege escalation
| sudo tar -xz -C /usr/local/bin ant
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
File stream creation
file: fs.createReadStream("data.csv"),
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
File stream creation
file: await toFile(fs.createReadStream("report.pdf"), undefined, {
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
File stream creation
import { createReadStream } from "fs";
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
File stream creation
file: await toFile(createReadStream("sales_data.csv"), undefined, {
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
File stream creation
file: fs.createReadStream("data.csv"),
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Hidden file access
If a type or member you need isn't in the tables above, `strings ~/.nuget/packages/anthropic/*/lib/*
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs operations
> **Reading local files (ESM):** `__dirname` and `__filename` are **undefined** in ES modules — usin
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs operations
const imageData = fs.readFileSync("image.png").toString("base64");
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs operations
fs.writeFileSync(f.filename, buffer);
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs promises API
await fs.promises.writeFile("output.txt", content);
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs promises API
await fs.promises.mkdir(OUTPUT_DIR, { recursive: true });
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Node.js fs promises API
await fs.promises.writeFile(outputPath, fileBytes);
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Python os file operations
os.makedirs(OUTPUT_DIR, exist_ok=True)
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Shell command substitution
response=$(curl -s https://api.anthropic.com/v1/messages \
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
input_tokens=$(echo "$response" | jq -r '.usage.input_tokens')
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
output_tokens=$(echo "$response" | jq -r '.usage.output_tokens')
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
stop_reason=$(echo "$response" | jq -r '.stop_reason')
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
response=$(curl -s https://api.anthropic.com/v1/messages \
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
if [ "$(echo "$response" | jq -r '.stop_reason')" != "refusal" ] && \
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
xattr -d com.apple.quarantine "$(brew --prefix)/bin/ant"
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
curl -fsSL "https://github.com/anthropics/anthropic-cli/releases/download/v${VERSION}/ant_${VERSION}
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
-H "Authorization: Bearer $(ant auth print-credentials --access-token)" \
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
set -a; eval "$(ant auth print-credentials --env)"; set +a
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
AGENT_ID=$(ant beta:agents create --name "My Agent" --model '{id: claude-sonnet-5}' \
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
AGENT_ID=$(ant beta:agents create < summarizer.agent.yaml --transform id -r)
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Shell command substitution
FIRST=$(ant beta:agents list --transform id -r --max-items 1)
The cited example executes an external command or evaluates shell command substitution. This behavior is intentional but carries command-execution risk.
中
Synchronous file operations
> **Reading local files (ESM):** `__dirname` and `__filename` are **undefined** in ES modules — usin
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Synchronous file operations
const imageData = fs.readFileSync("image.png").toString("base64");
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Synchronous file operations
import { readFileSync } from "fs";
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Synchronous file operations
const pdfBytes = readFileSync(join(__dirname, "sample.pdf"));
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Synchronous file operations
Or use a CWD-relative path if the script runs from a known directory: `readFileSync("./sample.pdf")`
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
中
Synchronous file operations
fs.writeFileSync(f.filename, buffer);
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
低
Environment variable access (dot notation)
authorization_token: process.env.GITHUB_TOKEN, // repo clone token (≠ MCP auth)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable access (dot notation)
const environmentKey = process.env.ANTHROPIC_ENVIRONMENT_KEY!;
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable access (dot notation)
const environmentId = process.env.ANTHROPIC_ENVIRONMENT_ID!;
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable access (dot notation)
authorization_token: process.env.GITHUB_TOKEN,
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable object
authorization_token: process.env.GITHUB_TOKEN, // repo clone token (≠ MCP auth)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable object
const environmentKey = process.env.ANTHROPIC_ENVIRONMENT_KEY!;
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable object
const environmentId = process.env.ANTHROPIC_ENVIRONMENT_ID!;
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Environment variable object
authorization_token: process.env.GITHUB_TOKEN,
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
getenv function call
$client = new Client(apiKey: getenv("ANTHROPIC_API_KEY"));
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
getenv function call
apiKey: getenv('ANTHROPIC_FOUNDRY_API_KEY'),
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
getenv function call
'x-api-key: ' . getenv('ANTHROPIC_API_KEY'),
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
response=$(curl -s https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
response=$(curl -s https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/environments \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/environments \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/agents \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/sessions \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
# Trace: https://platform.claude.com/workspaces/default/sessions/sesn_abc123
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/agents \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/sessions \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://github.com/owner/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/sessions/$SESSION_ID/events \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -N https://api.anthropic.com/v1/sessions/$SESSION_ID/events/stream \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/sessions/$SESSION_ID/events \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl "https://api.anthropic.com/v1/sessions/$SESSION_ID/events?page=page_abc123" \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/sessions/$SESSION_ID/events \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/sessions/$SESSION_ID/events \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/sessions/$SESSION_ID \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/sessions \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X DELETE https://api.anthropic.com/v1/sessions/$SESSION_ID \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -X POST https://api.anthropic.com/v1/files \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
fmt.Printf("Trace: https://platform.claude.com/workspaces/default/sessions/%s\n", session.ID)
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
URL: "https://api.githubcopilot.com/mcp/",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
MCPServerURL: "https://mcp.slack.com/mcp",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
TokenEndpoint: "https://slack.com/api/oauth.v2.access",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
URL: "https://github.com/org/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
URL: "https://github.com/org/frontend",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
URL: "https://github.com/org/backend",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.url("https://example.com/mcp")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
System.out.println("Trace: https://platform.claude.com/workspaces/default/sessions/" + session.id())
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.url("https://api.githubcopilot.com/mcp/")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.mcpServerUrl("https://mcp.slack.com/mcp")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.tokenEndpoint("https://slack.com/api/oauth.v2.access")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.url("https://github.com/org/repo")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.url("https://github.com/org/frontend")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
.url("https://github.com/org/backend")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
baseUrl: 'https://<resource>.services.ai.azure.com/anthropic/v1',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: 'https://example.com/mcp',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
echo "Trace: https://platform.claude.com/workspaces/default/sessions/{$session->id}\n";
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
$ch = curl_init('https://api.anthropic.com/v1/files');
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: 'https://api.githubcopilot.com/mcp/',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
'mcp_server_url' => 'https://mcp.slack.com/mcp',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
'token_endpoint' => 'https://slack.com/api/oauth.v2.access',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
'url' => 'https://github.com/org/repo',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
'url' => 'https://github.com/org/frontend',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
'url' => 'https://github.com/org/backend',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
base_url="http://my.test.server.example.com:8083", # or ANTHROPIC_BASE_URL env var
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
http_client=DefaultHttpxClient(proxy="http://my.test.proxy.example.com"),
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://example.com/image.png"
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
print(f"Trace: https://platform.claude.com/workspaces/default/sessions/{session.id}")
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://github.com/owner/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
{"type": "url", "name": "my-tools", "url": "https://my-mcp-server.example.com/sse"},
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
puts "Trace: https://platform.claude.com/workspaces/default/sessions/#{session.id}"
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: "https://api.githubcopilot.com/mcp/"
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
mcp_server_url: "https://mcp.slack.com/mcp",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
token_endpoint: "https://slack.com/api/oauth.v2.access",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: "https://github.com/org/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: "https://github.com/org/frontend",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: "https://github.com/org/backend",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -fsSL "https://github.com/anthropics/anthropic-cli/releases/download/v${VERSION}/ant_${VERSION}
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/messages \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://api.githubcopilot.com/mcp/"
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://github.com/owner/repo (required)",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"mcp_servers": [{"type": "url", "name": "linear", "url": "https://mcp.linear.app/sse"}],
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
{ type: 'url', name: 'github', url: 'https://api.githubcopilot.com/mcp/' },
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: 'https://github.com/owner/repo',
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://api.githubcopilot.com/mcp/",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"url": "https://github.com/owner/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl -fsSL https://api.anthropic.com/v1/deployments \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
{ "type": "url", "name": "linear", "url": "https://mcp.linear.app/mcp" }
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"mcp_server_url": "https://mcp.notion.com/mcp",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
"token_endpoint": "https://api.notion.com/v1/oauth/token",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
curl https://api.anthropic.com/v1/models/claude-opus-4-8 \
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
mcp_servers=[{"type": "url", "url": "https://example/sse", "name": "example-mcp"}],
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
source: { type: "url", url: "https://example.com/image.png" },
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
console.log(`Trace: https://platform.claude.com/workspaces/default/sessions/${session.id}`);
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
url: "https://github.com/owner/repo",
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Hardcoded URL
{ type: "url", name: "my-tools", url: "https://my-mcp-server.example.com/sse" },
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
HTTP client library
const result = await linear.request(event.input.query, event.input.vars) // host's key
The cited example contains a concrete service URL or client request used for API, repository, OAuth, or MCP network access.
低
Python environment access
"authorization_token": os.environ["GITHUB_TOKEN"],
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Python environment access
"authorization_token": os.environ["GITHUB_TOKEN"], # repo clone token (≠ MCP auth)
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Python environment access
environment_key = os.environ["ANTHROPIC_ENVIRONMENT_KEY"]
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Python environment access
environment_id = os.environ["ANTHROPIC_ENVIRONMENT_ID"]
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Python environment access
environment_key = os.environ["ANTHROPIC_ENVIRONMENT_KEY"]
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Python environment access
environment_id = os.environ["ANTHROPIC_ENVIRONMENT_ID"]
The cited guidance reads, sets, or relies on an environment variable for authentication or configuration. The access is intentional and documented.
低
Standard device file access
ant beta:sessions:events send --session-id "$SID" > /dev/null <<'YAML'
The cited example performs or recommends a local filesystem operation. It is documented functionality, but filesystem access is real.
リスク指摘
確認済みのセキュリティ上の懸念事項は、引き続きレビューが必要な項目と分けて表示されます。
確認済みのセキュリティ上の懸念 (2)
RISK-001 高
Unverified Archive Extracted with Elevated Privileges
The Linux installation example downloads a version-selected archive and pipes it directly to sudo tar without checksum or signature verification.
The two-line command clearly combines a remote download, a pipe, and privileged extraction into a system binary directory.
RISK-002 高
Credential Output Evaluated as Shell Code
The authentication example passes generated credential assignments through eval. A malformed or attacker-controlled value could become shell code.
The example explicitly uses eval on command output containing credentials and an optional configured base URL.
是正措置
この監査で推奨される修正が記録されています。これらを適用する責任はメンテナーにあります。
- FIX-001高The Linux installer pipes a downloaded archive directly into sudo tar.Download to a temporary file, verify a published checksum or signature, inspect the archive, then install the verified binary with limited privileges.
- FIX-002高The authentication example evaluates credential output as shell code.Provide shell-escaped exports from the CLI or parse dotenv output without eval. Keep tokens out of logs and command histories.
- FIX-003中Static review cappedManually review the omitted 268 static analyzer matches or reduce bundled generated/vendor/reference content before enabling automatic publication.
専門家による証拠
不変の対象ID、スキャナーメタデータ、除外された一致項目、およびソースレベルの証拠。
アーティファクト主体
- Marketplace コミット
- c43861a65bb95efcae259cd161c9d6f4dc7eec6f
- コンテンツハッシュ
- 1d08b3be1c02b6bd2d8c966b1645e234fbb36454d2dd4cbd39802d2f321bd0f4
- ツリーハッシュ
- 2e1dac7ef1a428465c7520edeb2994b0c976c754c9ea0fbf307a3c7bfe368f9b
- Skill パス
- skills/claude-api/claude-api
- 監査ペイロードハッシュ
- f62c60aa994571250cd5331b8ff24d69
分析メタデータ
監査モデル: codex
分析状態: 完了
対象範囲は、記録されたファイル、行、メソッド、および証拠に限定されます。ランタイムまたはサンドボックスでの実行は主張していません。
検証とエクスポート
マニフェストとロックファイルは、インストール成果物を暗号学的ハッシュに結び付けます。この完全性に関する主張は、セキュリティ評価とは別のものです。
監査アテステーション: active